Aggregator

Windsurf MCP Integration: Missing Security Controls Put Users at Risk

Embrace The Red
3 months 4 weeks ago
Part of my default test cases for coding agents is to check how MCP integration looks like, especially if the agent can be configured to allow setting fine-grained controls for tools. Sometimes there are basic security controls missing. Especially when running an agent on your local computer. Stakes are much higher. And it seems important to empower users to be able to configure which actions an AI should be able to take automatically, and which ones should be suggestions that the user reviews before executing.

Pear

Dark Feed IO
3 months 4 weeks ago

You must login to view this content

cohenido

CVE-2023-20644 | MediaTek MT8797 ril out-of-bounds (ALPS07628603 / EUVD-2023-24823)

Vuldb Updates
3 months 4 weeks ago
A vulnerability classified as problematic was found in MediaTek MT6580, MT6739, MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T and MT8797. This vulnerability affects unknown code of the component ril. Executing manipulation can lead to out-of-bounds read. The identification of this vulnerability is CVE-2023-20644. The attack can only be executed locally. There is no exploit available. Applying a patch is advised to resolve this issue.
vuldb.com

CVE-2023-20641 | MediaTek MT6879/MT6895/MT6983/MT8791/MT8791T/MT8797 ril out-of-bounds write (ALPS07629574 / EUVD-2023-24820)

Vuldb Updates
3 months 4 weeks ago
A vulnerability described as critical has been identified in MediaTek MT6879, MT6895, MT6983, MT8791, MT8791T and MT8797. The impacted element is an unknown function of the component ril. The manipulation results in out-of-bounds write. This vulnerability is known as CVE-2023-20641. Attacking locally is a requirement. No exploit is available. A patch should be applied to remediate this issue.
vuldb.com

CVE-2023-20642 | MediaTek MT8797 ril out-of-bounds write (ALPS07628586 / EUVD-2023-24821)

Vuldb Updates
3 months 4 weeks ago
A vulnerability classified as critical has been found in MediaTek MT6879, MT6895, MT6983, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T and MT8797. This affects an unknown function of the component ril. This manipulation causes out-of-bounds write. This vulnerability is handled as CVE-2023-20642. It is possible to launch the attack on the local host. There is not any exploit available. To fix this issue, it is recommended to deploy a patch.
vuldb.com

CVE-2023-20643 | MediaTek MT8797 ril out-of-bounds write (ALPS07628584 / EUVD-2023-24822)

Vuldb Updates
3 months 4 weeks ago
A vulnerability, which was classified as critical, has been found in MediaTek MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6781, MT6785, MT6833, MT6853, MT6873, MT6875, MT6877, MT6891, MT6893, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T and MT8797. Affected is an unknown function of the component ril. Performing manipulation results in out-of-bounds write. This vulnerability was named CVE-2023-20643. The attack needs to be approached locally. There is no available exploit. Applying a patch is the recommended action to fix this issue.
vuldb.com

South Korea Arrests Suspected Chinese Hacker Stolen Tens of Millions of Dollars from Victims

Cyber Security News
3 months 4 weeks ago

South Korean authorities have successfully extradited a Chinese national suspected of orchestrating one of the most sophisticated hacking operations targeting high-profile individuals and financial institutions. The 34-year-old suspect, identified only as Mr. G, was repatriated from Bangkok, Thailand, on August 22, 2025, following a four-month international manhunt that resulted in his arrest for allegedly stealing […]

The post South Korea Arrests Suspected Chinese Hacker Stolen Tens of Millions of Dollars from Victims appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2025-8147 | LWSCache Plugin up to 2.8.5 on WordPress Plugin Activation lwscache_activatePlugin authorization

VulDB Recent Entries
3 months 4 weeks ago
A vulnerability marked as problematic has been reported in LWSCache Plugin up to 2.8.5 on WordPress. Affected is the function lwscache_activatePlugin of the component Plugin Activation Handler. The manipulation leads to missing authorization. This vulnerability is referenced as CVE-2025-8147. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

CVE-2025-8619 | OSM Map Widget for Elementor Plugin up to 1.3.0 on WordPress Button URL cross site scripting

VulDB Recent Entries
3 months 4 weeks ago
A vulnerability identified as problematic has been detected in OSM Map Widget for Elementor Plugin up to 1.3.0 on WordPress. This affects an unknown function of the component Button URL Handler. Performing manipulation results in cross site scripting. This vulnerability was named CVE-2025-8619. The attack may be initiated remotely. There is no available exploit.
vuldb.com

Managed ad